Back to Guardian

Download Guardian Desktop

Guardian runs core safety checks locally. First launch downloads the runtime and your chosen model. Plan for at least 5GB free disk space. Larger models need more. The installer checks available space before downloading.

macOS builds

Recommended for M-series Macs

macOS Apple Silicon Notarized app for M-series Macs · 7.5MB

Not sure which Mac you have? Apple menu > About This Mac > Chip: "Apple M…" means this build; "Intel" means the Intel build.

SHA-256
dfd1767c6c12c1fb627c7231337e52e026abddfa79ac2ef3fe096c0d9cfb6d36
macOS Intel Notarized app for older Intel Macs · 8.0MB
SHA-256
50528540005925e1d2af7f973b9525bb7c424a9a7e250b3f0d92f91fbca3303e

Other platforms

Windows installer EXE setup · 5.5MB
SHA-256
544620ccd5daed508303db2eab85056060cda734db0da3bbd1da2a4093430b31
Windows MSI Managed install · 7.0MB
SHA-256
10099ab8986289e08a3d25e0276e63f2fd1b47ef40f399bfb9cc7115012c24fd
Linux AppImage Portable Linux app · 83.5MB
SHA-256
ddf71fdeb092a0ede55ff596a3f4b84549dddf812b662d1b0f0b3d917a2f9fdb
Linux DEB Debian or Ubuntu package · 7.8MB
SHA-256
7dbb46112cdc926c38b20a1fdc7e5c4df36150cf40010ecdf32a0aedb206d9fd

Windows release status

The current Windows installers are experimental and do not carry a Windows publisher code-signing certificate. Windows may show a SmartScreen warning. Verify the published SHA-256 digest before running them. Stable Windows publication is blocked until signed and timestamped artifacts are available.

First run checklist

  1. Open the installer for your platform.
  2. Allow the one-time runtime and model download.
  3. Paste a model response or agent action for a local Guardian check.
  4. For managed installs, verify the SHA-256 digest before deployment.
View the official Guardian Desktop 1.0.1 release

Local history and privacy

Guardian stores safety decisions, policy settings, and their rationale in a local database scoped to your OS account. The data is not encrypted at rest, so other software running under your account could read it. Clear local history when you no longer need it.

Verify your download

GitHub publishes SHA-256 digests for each Guardian Desktop 1.0.1 asset. After downloading, run this locally and compare the result with the SHA-256 shown under that file above.

shasum -a 256 <downloaded-file>

Match the filename exactly against the release's SHA256SUMS.txt. Signed updater artifacts also publish .sig sidecars on the official GitHub release page.